Privacy Policy
v2026-11-04
This explains exactly what we collect, who else sees it, and how you delete it. No fine print: we do not sell your personal information, and your health information is never used for marketing.
What we collect
We collect only what it takes to coach you. This is the whole list:
- Account: your name, email, phone, and preferred language.
- Your body and goals: sex, age, height, weight, goal weight, body fat percentage (optional), activity level, and what you are working toward.
- Health and safety: injuries, conditions such as PCOS or thyroid issues, pregnancy or postpartum status, and the pre-exercise safety questionnaire.
- Nutrition: what you log, including the photos you take of your meals.
- Training: the workouts you complete and your progress through them.
- Progress: your weight over time, measurements, and any photos you upload.
- Community and messages: what you post, and what you write to your coach.
- Technical: IP address, device type, and basic usage data.
Your health information
Your health information gets the strictest handling of anything we hold. It is used for one thing: building and adjusting your plan, and keeping you safe while you train.
We never use it for advertising or marketing, we never send it to our marketing tools, and we never sell it. That separation is built into the system, not just promised.
What we use it for
- Calculating your calories and macros and generating your plan.
- Adapting workouts to your injuries, conditions, and available equipment.
- Estimating macros from the food photos you upload.
- Answering your messages with your actual progress in view.
- Billing your subscription and sending receipts.
- Telling you about your account and, if you opt in, about the program by email or text.
Who else sees your data
We do not sell your personal information. Not ever. We work with the providers below to run the app, and each one receives only what it needs to do its part.
Mobile numbers and SMS consent are never shared with or sold to third parties or affiliates for marketing purposes.
| Who | What they receive | Why |
|---|---|---|
| Supabase | Your account, profile, health profile, logs, messages, and photos | Database, sign-in, and file storage. This is where your data lives. |
| Vercel | Requests to the app, including your IP address | Hosting and delivering the app. |
| Stripe | Name, email, and payment details | Taking payment. Card numbers go to Stripe directly; we never see or store them. |
| OpenRouter | Food photos and the text you send the coach | Routing those requests to the model that answers them. OpenRouter passes them to OpenAI, Google, or Anthropic depending on the feature. |
| OpenAI, Google, Anthropic | Food photos and coach messages, through OpenRouter | Reading a meal photo to estimate macros, and generating coaching replies. |
| Mux | Which videos you play and basic playback quality data | Delivering exercise videos. |
| Cloudflare | Your IP address on sign-up, and video delivery as a backup to Mux | Blocking bots on forms, and backup video hosting. |
| Resend | Your email address and the contents of emails we send you | Sending account email: sign-in links, receipts, and notifications. |
| GoHighLevel | Name, email, phone, language, and membership status | Email and text-message communication (texts only if you opt in) and marketing. Your health information is never sent here. |
| Twilio | Your phone number and the contents of texts we send you | Delivering the text messages we send through GoHighLevel, only if you opt in. |
| Sentry | Technical error reports, which can include your account id | Finding and fixing crashes. |
| PostHog | How the app is used, such as which screens are opened | Understanding which features help and which do not. |
Text messages (SMS)
If you give us your mobile number and check the text-message box on one of our forms, we will send you recurring automated text messages from Lost Heart FitX: app launch updates, motivation, and account and challenge reminders. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply.
Reply STOP to any text to opt out at any time, or HELP for help. After you reply STOP we send one confirmation and no further texts.
- Mobile numbers and SMS consent are never shared with or sold to third parties or affiliates for marketing purposes.
- Text-messaging opt-in data and consent are excluded from all other information sharing described in this policy.
- Your number is received only by the providers that deliver our texts (GoHighLevel and its messaging carrier partner, listed in the table above), and only to send you the messages you asked for.
- We keep your number, the date and time you agreed, and the exact consent wording you saw, so we can honor and prove your choice.
How long we keep it, and how you delete it
- You can delete your account inside the app, under Account, at any time. You do not need to email anyone.
- Deleting removes your profile, health profile, logs, photos, and messages, and cancels an active subscription.
- We keep payment records for as long as tax and accounting law requires, even after you delete.
- You can also download a copy of your data from Account before you delete it.
Your choices
- You can edit your health profile any time under You, Health profile.
- You can unsubscribe from marketing email without losing account email.
- You can withdraw consent by deleting your account.
- If you want to know what we hold about you, ask us from the Support page and we will tell you.
Age
Lost Heart FitX is not for children under 13, and we do not knowingly collect data from anyone under 13.
Changes
If we change how we handle your data we update this page and its version number. If the change is significant, we will tell you.
Contact: Reach us from the Support page
← Back to home